I still have VLC2.1.2 which is not "insecure" and it has not done an 0.9.4 (as yet) on myPSI 2.0.0.3003 . All the versions of the PSI use similar detection engines and rules ; in future , before you update it would be worth checking the detction location in case it is an old/displaced/temporary file . Unlikely , but you may have VLC files now in two locations .

I note from your other thread with Maurice that , being a long time user , you used to use version 2 without any major problems . I have the same Comodo/Avira/SAS/Mbam as you on my XP (with IE8 - never ever used except by the PSI) and am pretty much Secunia error free - bearing in mind I have "auto-update" set to prompt" and for very good reasons , I then do the job manually myself .